$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143370.roa File: AS143370.roa (raw, json) Hash identifier: wiC9rQui8l+HCJWhOhpF2cbaq8Ru26G3TIy18t6nclo= Subject key identifier: C6:74:23:F2:40:85:36:FD:A6:18:3E:FB:2F:EE:AC:F1:43:83:93:32 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 3CE54607D5771886DF0A9ED73FE586DF2FAA1FEB Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143370.roa Signing time: Wed 04 Mar 2026 06:05:56 +0000 ROA not before: Wed 04 Mar 2026 06:00:56 +0000 ROA not after: Wed 03 Mar 2027 06:05:56 +0000 asID: 143370 IP address blocks: 240a:a2d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e5:46:07:d5:77:18:86:df:0a:9e:d7:3f:e5:86:df:2f:aa:1f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:00:56 2026 GMT Not After : Mar 3 06:05:56 2027 GMT Subject: CN=C67423F2408536FDA6183EFB2FEEACF143839332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:90:11:a8:96:2c:b7:94:8b:7b:24:35:4a: 40:ca:97:8b:41:84:f1:c2:67:3a:6b:0f:c3:cf:00: 0e:85:49:3d:97:ab:bd:9f:0d:06:bd:6d:f1:95:db: 56:5f:6d:3d:f3:38:7d:61:23:75:fb:ab:9e:ed:d0: 66:3f:2d:b0:d2:16:cc:2a:49:32:12:2a:2b:33:5c: 0d:0a:2e:b9:4d:55:88:20:f8:2d:f0:d1:18:00:17: 2f:23:90:fe:c3:2f:7f:af:5c:53:99:a6:dd:55:dc: fc:c4:5b:be:81:54:87:6b:e8:fc:cb:ec:4b:75:28: 64:3e:f3:8e:8a:22:b3:96:53:ed:be:ce:dd:6a:e7: 08:30:b7:dd:6e:76:c1:11:75:01:bf:42:45:47:4c: c2:86:62:3f:c7:df:c0:c7:a2:f6:83:9e:09:a4:80: 33:ab:95:9c:f6:bb:47:5a:c5:ef:67:fb:9b:22:86: 92:59:69:18:62:50:89:a5:64:ea:74:e6:b9:d5:e6: d3:f0:7f:a7:96:35:7b:24:2c:33:f0:e5:8d:9d:37: 48:b7:04:d8:2d:5e:04:ce:32:80:ff:7e:65:64:b3: ce:de:a2:92:5c:84:a5:e3:45:11:db:8e:b0:0f:65: 29:55:db:7d:7d:b1:5b:58:45:72:aa:c8:9c:80:ed: 92:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:74:23:F2:40:85:36:FD:A6:18:3E:FB:2F:EE:AC:F1:43:83:93:32 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143370.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a2d0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:19:ed:d2:a6:4e:7e:8f:02:cc:27:17:9b:f1:8e:51:65:f0: 92:df:66:83:c7:f5:7e:fe:95:78:99:aa:bc:98:de:76:9f:59: 4f:02:43:06:8f:71:3d:cb:41:57:8f:df:9b:16:85:e8:36:ee: 1a:09:40:f3:57:a4:7b:ec:11:36:55:d9:31:d4:06:4e:b3:b6: 48:17:7a:a8:86:96:b6:09:ea:5d:67:29:75:38:1b:e5:71:f0: 2f:53:14:d6:68:d4:3e:50:78:90:a2:9d:c7:86:cd:10:66:9e: 09:34:4d:43:01:09:43:2b:22:26:ea:de:94:cd:31:70:bb:6b: 01:7e:6d:e0:be:5c:b8:be:d8:2d:a2:fc:31:06:b2:a5:48:35: bb:b9:c5:89:1f:31:c1:19:8b:13:94:28:4b:f6:0d:c1:92:a3: 60:59:a0:d9:e2:31:5f:44:53:37:05:a9:83:15:16:2c:44:8b: ed:76:d9:3e:ea:bc:a1:2c:d1:d1:e3:e3:24:e5:cb:fc:dc:6f: ce:be:e2:54:40:5c:2b:75:dd:e0:29:4f:05:4f:b4:52:be:90: bb:e1:d6:a5:f9:ea:2a:71:c5:b9:b0:ff:d1:41:eb:9e:f6:ef: 8b:1f:dc:ba:62:7f:df:e3:05:64:86:f8:ca:80:5f:49:45:64: e1:12:1d:e1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUPOVGB9V3GIbfCp7XP+WG3y+qH+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDA1NloX DTI3MDMwMzA2MDU1NlowMzExMC8GA1UEAxMoQzY3NDIzRjI0MDg1MzZGREE2MTgz RUZCMkZFRUFDRjE0MzgzOTMzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALq4kBGoliy3lIt7JDVKQMqXi0GE8cJnOmsPw88ADoVJPZervZ8NBr1t8ZXb Vl9tPfM4fWEjdfurnu3QZj8tsNIWzCpJMhIqKzNcDQouuU1ViCD4LfDRGAAXLyOQ /sMvf69cU5mm3VXc/MRbvoFUh2vo/MvsS3UoZD7zjoois5ZT7b7O3WrnCDC33W52 wRF1Ab9CRUdMwoZiP8ffwMei9oOeCaSAM6uVnPa7R1rF72f7myKGkllpGGJQiaVk 6nTmudXm0/B/p5Y1eyQsM/DljZ03SLcE2C1eBM4ygP9+ZWSzzt6iklyEpeNFEduO sA9lKVXbfX2xW1hFcqrInIDtkpcCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTGdCPy QIU2/aYYPvsv7qzxQ4OTMjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzM3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK otAwDQYJKoZIhvcNAQELBQADggEBAH0Z7dKmTn6PAswnF5vxjlFl8JLfZoPH9X7+ lXiZqryY3nafWU8CQwaPcT3LQVeP35sWheg27hoJQPNXpHvsETZV2THUBk6ztkgX eqiGlrYJ6l1nKXU4G+Vx8C9TFNZo1D5QeJCinceGzRBmngk0TUMBCUMrIibq3pTN MXC7awF+beC+XLi+2C2i/DEGsqVINbu5xYkfMcEZixOUKEv2DcGSo2BZoNniMV9E UzcFqYMVFixEi+122T7qvKEs0dHj4yTly/zcb86+4lRAXCt13eApTwVPtFK+kLvh 1qX56ipxxbmw/9FB657274sf3Lpif9/jBWSG+MqAX0lFZOESHeE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:13:43 2026 by rpki-client